Georg Tsakumagos
Georg Tsakumagos
Hi, thank you for merging. Would you mind to release the version? Recently our artifact repo killed the snapshot. Would be nice to have the fix available in central as...
Its an different use case. I use a nexus raw proxy repo to serve the cve data. The common place to put authentication information would be settings.xml. The plugin do...
You say i should not use nexus just because the current state of the plugin do not support simple authentication? Do you mind, that it work without auth like a...
@alan-czajkowski In fact using a raw proxy (nexus terminology) is what i did to overcome that problem. I was in lack of time to provide a PR for the plugin....
@alan-czajkowski Look at the [code](https://github.com/jeremylong/DependencyCheck/blob/6d1d84b4fd423754dde772914b3a55557a116623/core/src/main/java/org/owasp/dependencycheck/data/update/NvdCveUpdater.java#L381) & [code](https://github.com/jeremylong/DependencyCheck/blob/6d1d84b4fd423754dde772914b3a55557a116623/utils/src/main/java/org/owasp/dependencycheck/utils/Downloader.java#L128C23-L128C23). Its quite obvious that what you desire currently not working. If you have the strong need, you should consider authoring a PR and...
May i prove myself wrong but there is an option called: **mavenSettingsProxyId** for that documented in the [plugin maven site ](http://jeremylong.github.io/DependencyCheck/dependency-check-maven/configuration.html) at the end under the headline **Proxy Configuration**. Didn't...
@alan-czajkowski I used a separate raw repo in nexus without credentials. I could explain my cto that the security risk is not that great with a separate repo as you...